CVE-2026-80174: CWE-613: Insufficient Session Expiration in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 18% of CVEs
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until then, consider limiting remote access and session timeout configurations as a precautionary measure if configurable.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to session theft.
Summary
CVE-2026-80174 describes an insufficient session expiration vulnerability in Dell Secure Connect Gateway 5.0. Specifically, versions prior to 5.36.00.16 for the appliance and prior to 5.36.00.00 for the application are affected. This vulnerability allows a low privileged attacker with remote access to potentially exploit the insufficient session expiration mechanism, leading to session theft. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact.
Impact
An attacker with remote access and low privileges could exploit this vulnerability to steal valid sessions, potentially gaining unauthorized access to user sessions. This could compromise confidentiality of user data or session information. There is no reported impact on integrity or availability. No active exploitation has been reported.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.